2018/XX/XX XX:XX:XX.252+0530 CMRX.CRXXA4X PESecondary1 [Error] FNRPE2131090405E fail to move wob 87D6770XXX34194XXX7A3D2 to exception submap Malfunction; Exception: Unexpected exception -- see chained exception
at filenet.jpe.database.DbTransaction.throwTranException(DbTransaction.java:1103)
at filenet.jpe.database.DbTransaction.HandleDistributedTransactionError(DbTransaction.java:678)
at filenet.jpe.cm.CMRecoveryTask.doMyJob(CMRecoveryTask.java:135)
at filenet.jpe.cm.CMBaseTask.doJob(CMBaseTask.java:103)
at filenet.jpe.server.common.DelayBackgroundTask.run(DelayBackgroundTask.java:232)
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:939)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:963)
at java.lang.Thread.run(Thread.java:790)
Caused by: com.filenet.api.exception.EngineRuntimeException: FNRCE0001E: E_ACCESS_DENIED: The requester has insufficient access rights to perform the requested operation. failedBatchItem=0 errorStack={
at com.filenet.engine.persist.IndependentPersister.checkPropertyAccess(IndependentPersister.java:2365)
at com.filenet.engine.persist.IndependentPersister.checkUpdatePermissions(IndependentPersister.java:2072)
at com.filenet.engine.persist.IndependentPersister.preUpdate(IndependentPersister.java:1255)
at com.filenet.engine.persist.IndependentPersister.preExecuteChange(IndependentPersister.java:603)
at com.filenet.engine.persist.SubscribablePersister.preExecuteChange(SubscribablePersister.java:227)
at com.filenet.engine.persist.ReplicablePersister.preExecuteChange(ReplicablePersister.java:125)
at com.filenet.engine.persist.CmTaskPersister.preExecuteChange(CmTaskPersister.java:100)
at com.filenet.engine.persist.IndependentPersister.executeChangeWork(IndependentPersister.java:499)
at com.filenet.engine.persist.IndependentPersister.executeChange(IndependentPersister.java:333)
at com.filenet.engine.persist.SubscribablePersister.executeChange(SubscribablePersister.java:177)
at com.filenet.engine.jca.impl.RequestBrokerImpl.executeChanges(RequestBrokerImpl.java:1487)
at com.filenet.engine.jca.impl.RequestBrokerImpl.executeChanges(RequestBrokerImpl.java:1345)
at com.filenet.engine.ejb.EngineCoreBean._executeChanges(EngineCoreBean.java:619)
at com.filenet.engine.ejb.EngineCoreBean.executeChangesUT(EngineCoreBean.java:592)
at com.filenet.engine.ejb.EJSLocalStatelessEngineCore_22877cb1.executeChangesUT(Unknown Source)
at com.filenet.engine.ejb.EngineBean.executeChanges(EngineBean.java:909)
at com.filenet.apiimpl.transport.ejbstubs.EJSRemoteStatelessEngine_2e64c374.executeChanges(Unknown Source)
at com.filenet.apiimpl.transport.ejbstubs._Engine_Stub.executeChanges(_Engine_Stub.java:671)
at com.filenet.apiimpl.transport.ejb.EJBSession$EJBImpl._executeChanges(EJBSession.java:861)
at com.filenet.apiimpl.transport.ejb.EJBSession$EJBImpl.run(EJBSession.java:550)
at java.security.AccessController.doPrivileged(AccessController.java:488)
at javax.security.auth.Subject.doAs(Subject.java:573)
at com.ibm.websphere.security.auth.WSSubject.doAs(WSSubject.java:196)
at com.ibm.websphere.security.auth.WSSubject.doAs(WSSubject.java:153)
at sun.reflect.GeneratedMethodAccessor49.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:37)
at java.lang.reflect.Method.invoke(Method.java:611)
at com.filenet.apiimpl.util.J2EEUtilWS.doAs(J2EEUtilWS.java:239)
at com.filenet.apiimpl.transport.ejb.EJBSession$EJBImpl.executeChanges(EJBSession.java:599)
at com.filenet.apiimpl.transport.ejb.EJBSession.executeChanges(EJBSession.java:393)
at com.filenet.apiimpl.util.SessionHandle.executeChanges(SessionHandle.java:112)
at com.filenet.apiimpl.core.Session.callExecuteChanges(Session.java:184)
at com.filenet.apiimpl.core.Session.executeChanges(Session.java:570)
at com.filenet.api.core.UpdatingBatch.updateBatch(UpdatingBatch.java:168)
at filenet.jpe.server.common.CETransactionCache$FlushCEObjectsOnTransactionCommit.priorToCommitOp(CETransactionCache.java:228)
at filenet.jpe.database.DbTransaction.ProcessPriorToCommitTranOpSet(DbTransaction.java:1229)
at filenet.jpe.database.DbTransaction.executePriorToCommitOps(DbTransaction.java:584)
at filenet.jpe.database.DbTransaction.EndDistributedTransaction(DbTransaction.java:522)
at filenet.jpe.cm.CMRecoveryTask.doMyJob(CMRecoveryTask.java:130)
at filenet.jpe.cm.CMBaseTask.doJob(CMBaseTask.java:103)
at filenet.jpe.server.common.DelayBackgroundTask.run(DelayBackgroundTask.java:232)
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:939)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:963)
at java.lang.Thread.run(Thread.java:790)
}
at sun.reflect.GeneratedConstructorAccessor125.newInstance(Unknown Source)
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:39)
at java.lang.reflect.Constructor.newInstance(Constructor.java:527)
at com.ibm.rmi.io.NoArgNewInstanceAction.run(NoArgNewInstanceAction.java:43)
at java.security.AccessController.doPrivileged(AccessController.java:453)
at com.ibm.rmi.io.ExternalizableFactory.allocateNewExternalizableObject(ExternalizableFactory.java:62)
at com.ibm.rmi.io.FastPathForCollocated.deepCopy(FastPathForCollocated.java:240)
at com.ibm.rmi.io.ORBVM.deepCopyIfRequired(ORBVM.java:83)
at com.ibm.oti.vm.ORBVMHelpers.vmDeepCopy(ORBVMHelpers.java:206)
at com.ibm.rmi.io.VMDeepCopier.performDeepCopy(VMDeepCopier.java:229)
at com.ibm.rmi.io.FastPathForCollocated.writeNonStaticNonTransientFields(FastPathForCollocated.java:358)
at com.ibm.rmi.io.IIOPOutputStream.defaultWriteObjectDelegate(IIOPOutputStream.java:608)
at com.ibm.rmi.io.OutputStreamHook.defaultWriteObject(OutputStreamHook.java:133)
at java.lang.Throwable.writeObject(Throwable.java:321)
at sun.reflect.GeneratedMethodAccessor83.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:37)
at java.lang.reflect.Method.invoke(Method.java:611)
at com.ibm.rmi.io.FastPathForCollocated.invokeWriteObjectMethod(FastPathForCollocated.java:753)
at com.ibm.rmi.io.FastPathForCollocated.invokeWriteAndReadObjects(FastPathForCollocated.java:575)
at com.ibm.rmi.io.FastPathForCollocated.deepCopy(FastPathForCollocated.java:280)
at com.ibm.rmi.iiop.ObjectCopierFactory$DeepObjectCopier.doWork(ObjectCopierFactory.java:327)
at com.ibm.rmi.iiop.ObjectCopierFactory$AbstractCopier.waitForCompletion(ObjectCopierFactory.java:169)
at com.ibm.rmi.iiop.ObjectCopierFactory$AbstractCopier.getCopy(ObjectCopierFactory.java:187)
at com.ibm.rmi.util.ProxyUtil.copyObject(ProxyUtil.java:372)
at com.ibm.CORBA.iiop.UtilDelegateImpl.copyObject(UtilDelegateImpl.java:861)
at javax.rmi.CORBA.Util.copyObject(Util.java:327)
at com.filenet.apiimpl.transport.ejbstubs._Engine_Stub.executeChanges(_Engine_Stub.java:674)
at com.filenet.apiimpl.transport.ejb.EJBSession$EJBImpl._executeChanges(EJBSession.java:861)
at com.filenet.apiimpl.transport.ejb.EJBSession$EJBImpl.run(EJBSession.java:550)
at java.security.AccessController.doPrivileged(AccessController.java:488)
at javax.security.auth.Subject.doAs(Subject.java:573)
at com.ibm.websphere.security.auth.WSSubject.doAs(WSSubject.java:196)
at com.ibm.websphere.security.auth.WSSubject.doAs(WSSubject.java:153)
at sun.reflect.GeneratedMethodAccessor49.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:37)
at java.lang.reflect.Method.invoke(Method.java:611)
at com.filenet.apiimpl.util.J2EEUtilWS.doAs(J2EEUtilWS.java:239)
at com.filenet.apiimpl.transport.ejb.EJBSession$EJBImpl.executeChanges(EJBSession.java:599)
at com.filenet.apiimpl.transport.ejb.EJBSession.executeChanges(EJBSession.java:393)
at com.filenet.apiimpl.util.SessionHandle.executeChanges(SessionHandle.java:112)
at com.filenet.apiimpl.core.Session.callExecuteChanges(Session.java:184)
at com.filenet.apiimpl.core.Session.executeChanges(Session.java:570)
at com.filenet.api.core.UpdatingBatch.updateBatch(UpdatingBatch.java:168)
at filenet.jpe.server.common.CETransactionCache$FlushCEObjectsOnTransactionCommit.priorToCommitOp(CETransactionCache.java:228)
at filenet.jpe.database.DbTransaction.ProcessPriorToCommitTranOpSet(DbTransaction.java:1229)
at filenet.jpe.database.DbTransaction.executePriorToCommitOps(DbTransaction.java:584)
at filenet.jpe.database.DbTransaction.EndDistributedTransaction(DbTransaction.java:522)
at filenet.jpe.cm.CMRecoveryTask.doMyJob(CMRecoveryTask.java:130)
... 5 more
XXXX/XX/XX 14:23:57.255+0530 CMRX.CRTCA47 PESecondary1 DB=CRTXXXX Reg#2 [Error] Wob EBAE2XXXXX8D4AA750XXXF4AB476, Exception on TaskState update (Work Performer Exception: LOCK TIMEOUT).; Exception: com.filenet.api.exception.EngineRuntimeException: FNRCE0057E: E_READ_ONLY: The method failed because an object or property is read-only. Read-only property LastFailureReason cannot be updated.
at com.filenet.apiimpl.property.PropertiesImpl.checkSettable(PropertiesImpl.java:696)
at com.filenet.apiimpl.property.PropertiesImpl.checkSettable(PropertiesImpl.java:666)
at com.filenet.apiimpl.property.PropertiesImpl.putValue(PropertiesImpl.java:370)
at filenet.jpe.server.isi.TaskStateUpdater.reallySetException(TaskStateUpdater.java:183)
at filenet.jpe.server.isi.TaskStateUpdater.setException(TaskStateUpdater.java:108)
at filenet.jpe.server.isi.InstructionSheetInterpreterClass.callExceptionIS(InstructionSheetInterpreterClass.java:3669)
at filenet.jpe.server.isi.InstructionSheetInterpreterClass.doAdvance(InstructionSheetInterpreterClass.java:2304)
at filenet.jpe.server.isi.InstructionSheetInterpreterClass.doExecute(InstructionSheetInterpreterClass.java:2042)
at filenet.jpe.server.isi.InstructionSheetInterpreterClass.advance(InstructionSheetInterpreterClass.java:1004)
at filenet.jpe.cm.CMRecoveryTask.doMyJob(CMRecoveryTask.java:129)
at filenet.jpe.cm.CMBaseTask.doJob(CMBaseTask.java:103)
at filenet.jpe.server.common.DelayBackgroundTask.run(DelayBackgroundTask.java:232)
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:939)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:963)
at java.lang.Thread.run(Thread.java:790)

3 answers

As this is only happening with one specific object store, it is definitely an object store or process security configuration issue. NOTE: it is not enough to simply add the user to the Root Folder and the Task Class. ALL USERS of an object store MUST be a member of the initial group that was assigned as 'Object Store Users' when the object store was created. In addition, increased access rights can be assigned to administrators, by making the admin user a member of the group which was assigned as 'Object Store Administrators' during object store creation. 'fnsystem' must be a member of BOTH of these groups. To ensure that the object store security is set correctly you can re-run the Security Wizard on the object store (right click context menu at the object store level) and assign the required groups. If you have recently added fnsystem to the p8Admins group, (having previously logged in without being a member of that group), you may need to wait for the security / membership changes to be synchronized with LDAP. This can take some hours depending on the user object caching timeouts. It may also be necessary to force process engine to synchronize any LDAP user/group changes depending on the sync interval configured for process engine. Use vwtool 'env' command to check and synchronize user and group data. Also try logging in to ACCE as 'fnsystem' and navigate to the 'Task' class definition and see if you can check and modify the 'default instance security', this should give you an indication of whether 'fnsystem' has sufficient access rights in the object store. @Arch@angel

Hi @Arch@ngle This function requires Admin rights. Please check that the user 'fnsystem' user is a member of the group that provides the 'Content Engine Administrators' role, and is also a member of the group that provides the 'Process Engine Administrators' role. (If this workflow does not interact with Content Engine you may only require membership of 'Process Engine Administrators').

Hi @scL2Consultant , 'fnsystem' is a member of ad group of p8admins , and have add to this object store with all rights. but seems its not getting inherited or something do i messing any place ? . i will recheck them all again anyway. i was getting same E_ACCESS_DENIED with my own case property before and when i replace that with a new property i was getting this.your input is highly appreciated @scL2Consultant !

May I clarify the situation. You originally had an error when using the invoke step, which you raised on the stackoverflow site. In this original error report the step was failing for read only access to a custom property "XXXX_XXXXdateStates", However, in the trace log for that condition it also reported that the workflow could not update the 'LastFailureReason' with the same access error as that reported for "XXXX_XXXXdateStates" READ_ONLY. You have now replaced "XXXX_XXXXdateStates" with a new property, but you still see the error associated with 'LastFailureReason'. This implies that there is a generic access permissions problem on the ObjectStore and/or Workflow system. You need to investigate the following: 1. Does this happen for all users who launch this workflow? 2. Does this happen in only one ObjectStore/Workflow system? 3. Does this workflow run successfully in other Regions or Workflow systems? 4. If this fails in all ObjectStores/Workflow systems, then there is a generic permissions access problem for the CPE Domain. 5. If this only happens in one ObjectStore/Workflow system, then there is a permissions access problem which is unique to the specific ObjectStore. If this is the case 'How was this ObjectStore created?' Was it imported or migrated or upgraded? 6. Identify where the properties are defined: Are these properties Content properties or only Workflow properties? When we have answers for the above, we can investigate further where the root problem lies.

HI , @scL2Consultant , its only happening with this object store and its newly created . i added fnsystem for the object store security . LastFailureReason is F_Casetask property and XXXX_XXXXdateStates was a F_CaseFolder property .in workflow launch step all are in [RW] , and its with [RW] for all users in flow , i added "fnsystem" user for root forder security and task class also . seems still its failing with contend engine . I have add fnsystem in P8admins in LDAP too.So your input is highly appreciated @scL2Consultant !